Study. uk . com
  1. Home
  2. All questions
  3. Question 557

CISM study material · question 557 of 1000

Which selection preference does NIST express for security products where an evaluated option exists?

  1. Prefer the product with the longest warranty period, since a longer warranty signals that the vendor stands behind its own engineering
  2. Prefer the product with the largest installed base, since widely deployed software has been exercised by more organisations than its rivals
  3. Prefer the product from the incumbent vendor
  4. Give consideration to products evaluated and tested by independent accredited laboratories against recognised specifications
Show the answer

Answer: D. Give consideration to products evaluated and tested by independent accredited laboratories against recognised specifications

SP 800-100 states organisations should give consideration to acquisition and deployment of security products evaluated and tested by independent accredited laboratories against appropriate security specifications, such as protection profiles under the Common Criteria.

Source: NIST SP 800-100 (NIST) — Table 12-6 Product Selection Questions

Challenge yourself on this topic → Study as cards